Just noticed uhttpd-mod-tls has been dropped. Does anyone know of a lightweight alternative (that doesn't require me building it myself)? Something that does what stunnel does, but not using openssl?
If not, is there any chance we can get a version of libcurl built against openssl, so I don't need to keep libmbedtls installed?
You simply need one libustream- variant in your build, (just as you did with uhttpd-mod-tls).
You can compile that by yourself already now. Curl has a build config option where you can select which SSL library it uses. But it has not been packages as a "variant", so it is not built automatically by the buildbot.
(I am currently building an OpenSSL-only build myself, as I have also replaced px5g with openssl-util, as LEDE's uhttpd knows how to generate SSL keys with openssl cmd tools. So there is only libopenssl in my build.)